Malicious code in spinner-envconfig-regulus-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3094685581e8535286d53ba4a65d093b12a027d9f305edb393fc8e9a267df3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115782

Malicious code in callisto-async-readable-ignite npm...

EUVD-2025-122809

Malicious code in redis-readable-convict-odin npm...

EUVD-2025-115087

Malicious code in config-gacrux-readable-loglevel npm...

EUVD-2025-114881

Malicious code in cressida-cygnus-commitlint-config-angular-readable npm...

EUVD-2025-113069

Malicious code in gridsome-grunt-lynx-readable npm...

EUVD-2025-111316

Malicious code in meissa-chakra-ui-mensa-readable npm...

EUVD-2025-116248

Malicious code in babel-dorado-firebase-readable npm...

EUVD-2025-114374

Malicious code in dotenv-parse-variables-readable-dactyl-dorado npm...

EUVD-2025-114151

Malicious code in element-ui-aquarius-pulsar-readable npm...

EUVD-2025-115934

Malicious code in buffer-readable-geckodriver-miranda npm...

EUVD-2025-113197

Malicious code in gemini-relay-readable-sadr npm...

EUVD-2025-112443

Malicious code in install-build-readable-gacrux npm...

Malicious code in middleware-weywot-eslint-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1a88c9b0d592888a18027b9fe9f06c0a29b5cf294a0a93073b116f95bcb23295 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-145329 Malicious code in nconf-readable-wasat-ariel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0599b1f33fa576bdb70fc7a72e764dfc3766113e5847b1a2f0ceb2cd50c5d209 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140520 Malicious code in celeste-remark-readable-rocket (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 724e457d8f4a5cdd399e63be6f869bbfb4f00b98106d11925fdc6580ac65bf57 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148509 Malicious code in terser-atlas-figures-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5adb748096ba778ee5999d50c614c52e7e276480ebb02aa4b345857a837b99e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148451 Malicious code in tailwindcss-readable-betelgeuse-xo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 11ae0e6f8a06367e95d49b65de1d5493df1d604d1155ae3b584b2a93917b4da1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147174 Malicious code in rehype-lint-staged-electron-builder-readable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0fb7661d97fa79becf96fd616adb271cd58835747f87115d70b43f80dede60f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-147083 Malicious code in readable-jwt-fornax-ultra (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 74332985997efc05d337b4e9ac85601488e33e0cf443517dc025b4354e7dee92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...